Complete a Risk Event Analysis

Risk owners will complete a Risk Event Analysis on a periodic basis for organizations, processes, IT Applications, or Projects and Events. The analysis is comprised of evaluating risk event categories and their respective residual risk. Residual risk is the level of risk remaining when considering external factors, response strategies, and mitigating controls.

Risk Event Analysis can be accessed from the following areas:

• Risk Control Matrix (organization, process, IT application, and project/event)
• Organizational Model (organization only)
• Organizational Unit
• IT Applications
• Projects and Events